A rooted Xoom can work in host mode. I'm told that perhaps that means it can inject packets. I wonder if an AirPcap adapter might work like this?http://www.androidcentral.com/usb-host-mode-enabled-motorola-xoom